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AMENDMENTS TO THE CLAIMS : 

1 . (Currently amended) A storage management system for managing a data file in 
storage to be accessed by a user, the storage management system comprising: 

a management object for managing a data file controlling management access in response 
to a request from a manager connected to the storage management system through a network 
upon an acc e ss by a us e r , said management object authenticating a second manager ID and a 
second password received through the network from the manager, in accordance with a first ID 
and a first password stored beforehand to authenticate the manager; [[and]] 

a storage configuration information file containing settings of the storage management 
system; and 

int e rfaces to be a temporary software interface object for accessing the settings in the 
storage configuration information file through the network, said temporary software interface 
object to be created by said management object when both authentication of the second manager 
ID and authentication of the second password by said management object succeed, and to be 
expired after a predetermined permission time, wherein: 

the authenticated manager's access to the settings contained in the storage configuration 
information file is permitted only while the temporary software interface object exists, 

said management object transmits a key, needed for communication through the network 
with the temporary software interface object, to the authenticated manager to enable 
management access to the storage configuration information file, and 

said int e rfac e s temporary software interface object permitting an access to said data fil e 
during the settings in the storage configuration information file is erased after lapse of said 
predetermined permission time ffem so as to expire access by the authenticated manager. 
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2. (Currently amended) A storage management system according to claim 1, 
wherein said int e rfac e s temporary software interface object created by said management object 
are is expired by th e ms e lves when a log-out sent from the authenticated manager at the end of 
the access is received. 

3. (Currently amended) A storage management system according to claim 1, 
wherein said manag e m e nt obj e ct transmits a corr e sponding ciph e r key transmitted to the 
authenticated manager auth e nticated by th e s e cond manag e r ID and th e s e cond password, and th e 
authenticat e d manager acc e sses th e interfaces by using th e ciph e r k e y represents an address of 
the temporary software interface object . 

4. (Currently amended) A storage management system according to claim 3, 
wh e r e in said manag e m e nt obj e ct cr e at e s differ e nt int e rfac es wh e n auth e ntication of anoth e r 
manag e r ID and auth e ntication of anoth e r password s e nt from anoth e r manag e r succ e eds, to b e 
e xpir e d aft e r a pr e d e t e rmin e d p e rmission tim e , th e diff e r e nt int e rfac e s p e rmitting an acc e ss to 
said data fil e during said pr e d e t e rmin e d permission tim e bv said anoth e r manag e r wherein: 

the temporary software interface object created for the authenticated manager enables use 
of a subset of management functions available through the storage management system when 
accessing the storage configuration information file; and 

the subset of management functions is defined by a stored information file for the 
authenticated manager from among a plurality of individualized stored information files for a 
plurality of managers . 
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5. (Currently amended) A storage management system according to claim 1, 
wherein said management object determines not to create the int e rfac e s a temporary software 
interface object is if a non-use period from most recent log-out of the manager exceeds a 
predetermined period when the second manager ID and the second password are authenticated. 

6. (Currently amended) A storage management system according to claim 1 5 further 
comprising an information file for storing a plurality of functions of a remote method invocation 
protocol e ach having permi s sion tim e for a manag e r and a plurality of flags for defining which 
manager is permitted to use which function. 

7. (Original) A storage management system according to claim 6, wherein said 
information file stores a flag for temporarily stopping the use of the created interfaces in 
response to a maintenance request. 

8. (Original) A storage management system according to claim 1, further 
comprising a storage for storing a Java virtual machine having a Java applet program, wherein 
the Java applet program is transmitted to the manager in response to a request from the manager. 

9. (Currently amended) A management program having computer codes readable by 
a storage management system to run thereon, for controlling management access in response to a 
request from a manager connected through a network to the storage management system, 
wherein the storage management system manages a data file in storage to be accessed by a user, 
the program comprising: 
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a step of authenticating a second manager ID and a second password received through the 
network from [[a]] the manager acc e ssing to a data fil e, in accordance with a first ID and a first 
password stored b e for e hand beforehand, to authenticate the manager ; [[and]] 

a step of creating int e rfac e s a temporary software interface object at the storage 
management system needed for accessing a storage configuration information file containing 
settings of the storage management system through the network, for the manag e r manager, if the 
authenticating of the second manager ID and the second password succeeds, wherein the 
authenticated manager's access to the settings contained in the storage configuration information 
file is permitted only while the temporary software interface object exists; 

a step of transmitting a key needed for communication through the network with the 
temporary software interface object to the authenticated manager to enable management access 
to the storage configuration information file; and 

a step of erasing said interfaces temporary software interface object permitting access by 
the manager during after a lapse of a predetermined permission time time, so as to expire the 
authenticated manager's ability to access the settings in the storage configuration information 
file. 

10. (Currently amended) A management program according to claim 9, wherein the 
interfac e s ar e temporary software interface object is expired by thems e lv e s when a log-out sent 
from the authenticated manager at the end of an access is received. 

11. (Currently amended) A management program according to claim 9, furth e r 
comprising a st e p of transmitting a corr e sponding ciph e r wherein the key transmitted to the 
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authenticated manager having b e en auth e nticat e d by the s e cond manag e r ID and th e second 
password represents an address of the temporary software interface object . 

12. (Currently amended) A management program according to claim 11, furth e r 
comprising a st e p of creating diff e r e nt int e rfac e s when th e auth e ntication of anoth e r manag e r ID 
and anoth e r pa s sword s e nt from anoth e r manager succ ee ds, and to b e e xpired after a 
pred e t e rmined p e rmission time, th e differ e nt int e rfac e s p e rmitting an acc e ss to said data fil e 
during said pr e det e rmin e d p e rmission tim e bv th e anoth e r manag e r wherein: 

the temporary software interface object created for the authenticated manager enables use 
of a subset of management functions available through the storage management system when 
accessing the storage configuration information file; and 

the subset of management functions is defined by a stored information file for the 
authenticated manager from among a plurality of individualized stored information files for a 
plurality of managers . 

13. (Currently amended) A management program according to claim 9, further 
comprising a step of preventing the creation of interfac e s a temporary software interface object if 
a non-use period from most recent log-out of the manager exceeds a predetermined period when 
the second manager ID and the second password are authenticated. 

14. (Original) A management program according to claim 9, wherein there is 
provided an information file for storing a plurality of functions of a remote method invocation 
protocol and a plurality of flags for defining which manager is permitted to use which function. 
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15. (Original) A management program according to claim 14, further comprising a 
step of storing a flag for temporarily stopping the use of the created interfaces in response to a 
maintenance request. 

16. (Original) A management program according to claim 9, further comprising a 
step of transmitting a Java applet program from a Java virtual machine to the manager in 
response to a request from the manager. 

17. (Currently amended) A storage manag e m e nt method of managing controlling 
management access in response to a request from a manager connected through a network to a 
storage management system managing a data file in storage to be accessed by a user, the method 
comprising: 

authenticating a second manager ID and a second password received through the network 
from the manager, in accordance with a first ID and a first password stored beforehand^ to 
authenticate the manager; 

creating int e rfaces for the authenticated manager a temporary software interface object at 
the storage management system needed for accessing a storage configuration information file 
containing settings of the storage management system through the network, when both 
authentication of the second manager ID and authentication of the second password succ ee d to 
p e rmit an acc e ss by th e auth e nticat e d manager succeed, wherein the authenticated manager's 
access to the settings contained in the storage configuration information file is permitted only 
while the temporary software interface object exists ; 



7 



Application No.: 10/021,550 

transmitting a key needed for communication through the network with the temporary 
software interface object to the authenticated manager to enable management access to the 
storage configuration information file; and 

e xpiring erasing the int e rfac e s temporary software interface object after a lapse of a 
predetermined permission time time, so as to expire the authenticated manager's ability to access 
the settings in the storage configuration information file . 

18. (Currently amended) A storag e manag e m e nt method according to claim 17, 
further comprising expiring the creat e d interfac e s by th e ms e lves temporary software interface 
object when a log-out sent from the authenticated manager at the end of the access is received. 

19. (Currently amended) A storag e management method according to claim 17, 
furth e r comprising transmitting a corr e sponding ciph e r wherein the key transmitted to the 
authenticated manager having b e en auth e nticat e d by the s e cond manager ID and th e s e cond 
password represents an address of the temporary software interface object . 

20. (Cancelled) 

21 . (New) A method according to claim 17, wherein: 

the temporary software interface object created for the authenticated manager enables use 
of a subset of management functions available through the storage management system when 
accessing the storage configuration information file; and 
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the subset of management functions is defined by a stored information file for the 
authenticated manager from among a plurality of individualized stored information files for a 
plurality of managers. 
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